Cross site scripting

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949...

IBM Planning Analytics cross-site scripting vulnerability

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Local, which stems from a...

Cross-Site Scripting (XSS)

jfinal is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the set method of the Controller class...

PT-2021-18400

Name of the Vulnerable Software and Affected Versions IBM Security Verify version 10.9.66 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session...

WordPress WP Google Maps plugin cross-site scripting vulnerability (CNVD-2021-49141)

WordPress is a set of open source blogging platforms developed using the PHP language by the WordPress Foundation. A stored cross-site scripting vulnerability exists in the WordPress WP Google Maps plugin. An attacker can exploit this vulnerability to execute client-side code by injecting...

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

✍️ Description The questionary section of livehelperchat can be modified listing new question . However, the template is used incorrectly resulting in a CSTI injection which leads to stored XSS. 🕵️‍♂️ Proof of Concept Install the livechat Go on...

CVE-2021-32536

Summary: CVE-2021-32536 affects the MCUsystem login page, where input is not filtered for special characters. This allows a remote attacker to inject JavaScript and perform a reflected XSS attack. The vulnerability is described across several sources (NVD, CVE list) as a login-page input validati...

CVE-2021-32536 MCU Technologies MCUsystem - Reflected XSS

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

CVE-2021-32536

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

TrendNet TW100-S4W1CA Cross-Site Scripting Vulnerability

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site scripting vulnerability exists in TrendNet TW100-S4W1CA version 2.3.32. The vulnerability can be exploited to inject arbitrary JavaScript into the router's web interface via the echo command...

MCU system cross-site scripting vulnerabilities

MCUsystem is a multipoint videoconferencing control system from Taiwan Enshiyo Technology Co. MCUsystem suffers from a cross-site scripting vulnerability that stems from the login page not filtering special characters, which can be exploited by a remote attacker to inject JavaScript without...

PT-2021-19762

Name of the Vulnerable Software and Affected Versions: MCUsystem affected versions not specified Description: The issue concerns the login page in the MCUsystem, which fails to filter special characters. This oversight allows remote attackers to inject JavaScript without privilege, thereby...

CVE-2021-32536: Improper Neutralization of Input During Web Page Generation

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

Fiyo CMS Cross-Site Scripting Vulnerability (CNVD-2021-45303)

Fiyo CMS is a content management system and software that allows users to add and/or manipulate change website content. A cross-site scripting vulnerability exists in the tag parameter in Fiyo CMS version 2.0.6.1. An attacker can exploit this vulnerability to add html/JavaScript to html code...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

Command injection

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

The connected sources confirm a Cross-Site Scripting (XSS) flaw in TrendNet TW100-S4W1CA router with firmware version 2.3.32. The vulnerability allows injecting arbitrary JavaScript into the router’s web interface via the echo command, enabling UI-scripted content execution. This is the concrete ...

Fiyo CMS cross-site scripting vulnerabilities

Fiyo CMS is a content management system and software that allows users to add and/or manipulate change website content. A cross-site scripting vulnerability exists in the tag parameter in Fiyo CMS version 2.0.6.1. An attacker can exploit this vulnerability to add html/JavaScript to html code...